CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.3. It may be remotely exploitable.
CVE
CVE-2026-4547
Severity
MEDIUM
CVSS
4.3
EPSS
0.21%
Original NVD Description
A security vulnerability has been detected in mickasmt next-saas-stripe-starter 1.0.0. Affected is the function generateUserStripe of the file actions/generate-user-stripe.ts of the component Checkout Handler. The manipulation of the argument priceId leads to business logic errors. The attack may be initiated remotely.